This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/C0PrDFjg6tEYdS7FGUYA9AvbjNY.roa File: C0PrDFjg6tEYdS7FGUYA9AvbjNY.roa (raw, json) Hash identifier: t+XZROmYPw3eLWYfe874QIA62oa0drYjVlfaoEDAL5I= Subject key identifier: 0B:43:EB:0C:58:E0:EA:D1:18:75:2E:C5:19:46:00:F4:0B:DB:8C:D6 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B783448C620808299C062D1C99652D13A Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/C0PrDFjg6tEYdS7FGUYA9AvbjNY.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24013 IP address blocks: 45.11.45.0/24 maxlen: 32 185.222.222.0/24 maxlen: 32 2a09::/48 maxlen: 128 2a09:7:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:48:c6:20:80:82:99:c0:62:d1:c9:96:52:d1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b43eb0c58e0ead118752ec5194600f40bdb8cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:dd:ad:6d:68:ec:9b:eb:8a:30:4d:3d:9b: 7b:a2:6d:64:4b:26:55:0a:bd:bc:17:fa:eb:d6:92: 13:d5:9f:8c:6c:d3:a3:c4:b9:dc:20:ee:b8:8e:dc: d6:2c:07:65:12:2c:c5:13:ab:63:77:3a:af:59:14: 38:92:3f:8f:4f:9b:b9:da:06:0e:7a:b6:20:60:98: 23:87:87:18:49:85:6f:b5:c8:1a:8f:c7:86:8e:f8: 8c:e3:bb:cf:b3:5d:8b:2c:8f:73:5c:61:1f:d2:39: 49:3f:46:45:8a:fb:32:82:87:85:16:33:ac:ce:1e: fa:86:2d:5d:bc:06:ec:ea:1d:11:2c:dc:d7:91:b3: 08:9c:11:37:b0:16:bb:dd:95:44:77:08:cf:50:46: d4:d4:30:94:51:ce:29:37:17:1e:32:bb:c3:7b:35: ee:5d:2e:eb:d3:7d:8f:f1:1e:d3:09:97:13:f9:89: 8e:98:26:08:09:cf:97:cb:fd:19:49:58:68:6f:ab: 84:4e:77:67:63:f4:6f:5d:50:63:80:e0:a4:53:22: c5:f4:66:26:9b:0e:ab:46:f6:39:be:29:70:df:4a: d1:99:07:a3:7f:b3:11:ac:81:72:6a:1b:25:06:9b: d6:ee:63:53:88:e4:ee:09:a1:da:b4:35:7f:05:82: e1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:43:EB:0C:58:E0:EA:D1:18:75:2E:C5:19:46:00:F4:0B:DB:8C:D6 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/C0PrDFjg6tEYdS7FGUYA9AvbjNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.45.0/24 185.222.222.0/24 IPv6: 2a09::/48 2a09:7:1000::/36 Signature Algorithm: sha256WithRSAEncryption 8b:4e:ea:fb:be:68:cc:ea:56:28:93:bf:09:25:f5:6a:50:20: dc:67:15:81:5a:73:a1:c1:4f:6b:1d:08:e4:a3:0d:24:7b:56: 93:c5:f5:10:6b:02:0f:2b:62:b6:a9:4d:25:13:8c:b2:8f:39: 1d:fd:7f:3d:c1:17:49:eb:a3:13:d8:10:bf:65:dd:ea:d6:a7: 99:4e:d1:32:4c:cc:02:27:49:0f:7b:1c:70:17:e4:08:f3:86: f1:ca:df:8b:ba:d5:b5:59:1c:58:11:e7:09:d5:bb:45:9d:42: d3:3c:41:27:86:d3:cd:c6:08:70:c5:db:7e:f0:c2:c4:62:83: a1:fd:c7:6e:4f:1b:ac:ba:58:27:b7:7d:a7:de:d8:a0:47:07: 36:26:bb:28:4b:ea:95:96:ee:52:36:35:f7:8e:e3:5a:ce:30: 31:20:90:a4:a9:2f:7e:0f:e1:1f:d8:c9:88:b9:1a:d7:ce:87: 93:3b:ba:56:7d:91:46:26:4a:8a:5f:8a:e1:bf:ae:47:34:6d: fd:c9:d0:08:34:35:41:53:5d:44:0e:92:7c:06:67:52:3b:0b: e7:41:63:97:8b:5b:a5:ce:91:9a:f1:60:08:58:46:b6:30:43: ce:83:3b:3c:f1:b5:c3:4b:c8:7c:ec:a0:b7:20:38:fb:e5:29: 0d:6d:29:e5 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt4NEjGIICCmcBi0cmWUtE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjQzZWIwYzU4ZTBlYWQxMTg3NTJlYzUxOTQ2MDBmNDBiZGI4Y2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe7drW1o7JvrijBNPZt7om1kSyZV Cr28F/rr1pIT1Z+MbNOjxLncIO64jtzWLAdlEizFE6tjdzqvWRQ4kj+PT5u52gYO erYgYJgjh4cYSYVvtcgaj8eGjviM47vPs12LLI9zXGEf0jlJP0ZFivsygoeFFjOs zh76hi1dvAbs6h0RLNzXkbMInBE3sBa73ZVEdwjPUEbU1DCUUc4pNxceMrvDezXu XS7r032P8R7TCZcT+YmOmCYICc+Xy/0ZSVhob6uETndnY/RvXVBjgOCkUyLF9GYm mw6rRvY5vilw30rRmQejf7MRrIFyahslBpvW7mNTiOTuCaHatDV/BYLhswIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFAtD6wxY4OrRGHUuxRlGAPQL24zWMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvQzBQckRGamc2dEVZZFM3RkdVWUE5QXZiak5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQALQstAwQA ud7eMBcEAgACMBEDBwAqCQAAAAADBgQqCQAHEDANBgkqhkiG9w0BAQsFAAOCAQEA i07q+75ozOpWKJO/CSX1alAg3GcVgVpzocFPax0I5KMNJHtWk8X1EGsCDytitqlN JROMso85Hf1/PcEXSeujE9gQv2Xd6tanmU7RMkzMAidJD3sccBfkCPOG8crfi7rV tVkcWBHnCdW7RZ1C0zxBJ4bTzcYIcMXbfvDCxGKDof3Hbk8brLpYJ7d9p97YoEcH Nia7KEvqlZbuUjY1947jWs4wMSCQpKkvfg/hH9jJiLka186Hkzu6Vn2RRiZKil+K 4b+uRzRt/cnQCDQ1QVNdRA6SfAZnUjsL50Fjl4tbpc6RmvFgCFhGtjBDzoM7PPG1 w0vIfOygtyA4++UpDW0p5Q== -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:20 2026 by rpki-client